@pellux/goodvibes-tui 1.19.4 → 1.19.5

package/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [1.19.5] - 2026-07-18
+
+### Changes
+
+Fixed: command results no longer print the credential-scrub env-var name list ("withheld: ...") on every collapsed line — the dominant transcript noise for anyone with several API keys exported. The full detail remains in the expanded result payload.
+Fixed: the encrypted secrets store can no longer be silently orphaned by key changes — key generation is race-safe, writes refuse a stale cached key (and restore a missing keyfile), and a mismatched store now reports exactly which key wrote it.
+Updated: bundled platform runtime to 1.11.4.
+
 ## [1.19.4] - 2026-07-17
 
 ### Changes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-1.19.4-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-1.19.5-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "1.11.3"
+    "version": "1.11.4"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "1.19.4",
+  "version": "1.19.5",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -104,8 +104,8 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "1.11.3",
-    "@pellux/goodvibes-terminal-shell": "1.11.3",
+    "@pellux/goodvibes-sdk": "1.11.4",
+    "@pellux/goodvibes-terminal-shell": "1.11.4",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",
@@ -131,10 +131,10 @@
     "typescript": "^5.9.3"
   },
   "optionalDependencies": {
-    "@pellux/goodvibes-tui-linux-x64": "1.19.4",
-    "@pellux/goodvibes-tui-linux-arm64": "1.19.4",
-    "@pellux/goodvibes-tui-darwin-x64": "1.19.4",
-    "@pellux/goodvibes-tui-darwin-arm64": "1.19.4"
+    "@pellux/goodvibes-tui-linux-x64": "1.19.5",
+    "@pellux/goodvibes-tui-linux-arm64": "1.19.5",
+    "@pellux/goodvibes-tui-darwin-x64": "1.19.5",
+    "@pellux/goodvibes-tui-darwin-arm64": "1.19.5"
   },
   "trustedDependencies": [],
   "overrides": {

package/src/renderer/tool-result-summary.ts

@@ -93,21 +93,12 @@ function summarizeEdit(obj: Record<string, unknown>): string | null {
   return `${verb} ${applied} edit${applied === 1 ? '' : 's'}${target}${failText}`;
 }
 
-/** Credential-bearing env-var names withheld from the spawn (never values). Empty when the field is absent/empty. */
-function withheldEnvNames(obj: Record<string, unknown>): string[] {
-  const raw = obj.withheld_env;
-  if (!Array.isArray(raw)) return [];
-  return raw.filter((n): n is string => typeof n === 'string' && n.length > 0);
-}
-
-/** Compact "withheld: NAME, NAME, …" suffix, capped so a long scrub list doesn't dominate the collapsed line. */
-function withheldEnvSuffix(names: readonly string[]): string {
-  if (names.length === 0) return '';
-  const MAX_SHOWN = 3;
-  const shown = names.slice(0, MAX_SHOWN).join(', ');
-  const more = names.length > MAX_SHOWN ? `, +${names.length - MAX_SHOWN} more` : '';
-  return ` · withheld: ${shown}${more}`;
-}
+// The credential scrub's withheld_env report stays OUT of the collapsed line
+// entirely. It withholds the same standing set of names on every spawn, so any
+// per-result rendering repeats identical env-var noise all session long — the
+// dominant transcript spam for anyone with several keys exported. The report
+// only matters when a command fails because a needed credential was scrubbed,
+// and for that case the full name list is one expand away in the raw payload.
 
 /**
  * Compact per-command exec-sandbox suffix: `sandboxed` fields are present
@@ -141,17 +132,16 @@ function summarizeExecOne(obj: Record<string, unknown>): string | null {
   const exit = obj.exit_code;
   const dur = asNumber(obj.duration_ms);
   const durText = dur !== undefined ? ` · ${formatDuration(dur)}` : '';
-  const withheldText = withheldEnvSuffix(withheldEnvNames(obj));
   const sandboxText = sandboxSuffix(obj);
-  if (obj.timed_out === true) return `timed out${durText}${withheldText}${sandboxText}`;
-  if (obj.cancelled === true) return `cancelled${durText}${withheldText}${sandboxText}`;
+  if (obj.timed_out === true) return `timed out${durText}${sandboxText}`;
+  if (obj.cancelled === true) return `cancelled${durText}${sandboxText}`;
   const stdout = typeof obj.stdout === 'string' ? obj.stdout : '';
   const lineCount = stdout.length === 0
     ? 0
     : stdout.replace(/\n$/, '').split('\n').length;
   const lineText = lineCount > 0 ? ` · ${lineCount} line${lineCount === 1 ? '' : 's'}` : '';
   const code = typeof exit === 'number' ? String(exit) : '?';
-  return `exit ${code}${durText}${lineText}${withheldText}${sandboxText}`;
+  return `exit ${code}${durText}${lineText}${sandboxText}`;
 }
 
 /** exec: single { cmd, exit_code, ... } or multi { commands: [...], total }. */
@@ -161,15 +151,6 @@ function summarizeExec(obj: Record<string, unknown>): string | null {
     const failed = obj.commands.filter(
       (c) => c && typeof c === 'object' && (c as Record<string, unknown>).success === false,
     ).length;
-    // Union of withheld names across every command in the batch — the scrub
-    // runs per-spawn, so different commands can withhold different names.
-    const withheldAcrossCommands = new Set<string>();
-    for (const c of obj.commands) {
-      if (c && typeof c === 'object') {
-        for (const name of withheldEnvNames(c as Record<string, unknown>)) withheldAcrossCommands.add(name);
-      }
-    }
-    const withheldText = withheldEnvSuffix([...withheldAcrossCommands]);
     // Count sandboxed commands across the batch — a compact "N sandboxed" beats
     // repeating each command's full boundary detail on the collapsed line.
     const sandboxedCount = obj.commands.filter(
@@ -177,8 +158,8 @@ function summarizeExec(obj: Record<string, unknown>): string | null {
     ).length;
     const sandboxText = sandboxedCount > 0 ? ` · ${sandboxedCount} sandboxed` : '';
     return failed > 0
-      ? `${total} commands · ${failed} failed${withheldText}${sandboxText}`
-      : `${total} commands · all ok${withheldText}${sandboxText}`;
+      ? `${total} commands · ${failed} failed${sandboxText}`
+      : `${total} commands · all ok${sandboxText}`;
   }
   if ('exit_code' in obj || 'timed_out' in obj || 'cancelled' in obj) {
     return summarizeExecOne(obj);

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '1.19.4';
+let _version = '1.19.5';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   // Only trust a version read from OUR OWN package.json. A Bun single-file